Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
File: hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft (raw, json)
Hash identifier: CtQCZR/JJ/vGO6AGQaNpmIAroI+SZhs3K2fGvE4miK8=
Subject key identifier: 85:38:90:8E:49:40:F9:8D:76:63:05:38:64:56:76:2C:DC:AF:27:FB
Authority key identifier: 85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
Certificate issuer: /CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Certificate serial: 019510C7C0DBAB3FFE276AE01E6E269AACA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
Manifest number: 0C55
Signing time: Sun 16 Feb 2025 22:01:21 +0000
Manifest this update: Sun 16 Feb 2025 22:01:21 +0000
Manifest next update: Mon 17 Feb 2025 22:01:21 +0000
Files and hashes: 1: hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl (hash: /rTUoYnCf4WKM9gVP17cNU2tC5zKOMI8Cwd2P+3PFs8=)
2: lHldbm0YksaCuz9XIehAf5kRzB0.roa (hash: BN7mh6nrwtoaOUPVrCKlYMfyId9M155pIfSIqKbQaEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:c0:db:ab:3f:fe:27:6a:e0:1e:6e:26:9a:ac:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Validity
Not Before: Feb 16 22:01:21 2025 GMT
Not After : Feb 17 22:01:21 2025 GMT
Subject: CN=8538908e4940f98d766305386456762cdcaf27fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8d:55:80:34:29:d6:69:d7:0d:30:1f:b2:3f:
23:73:fb:eb:3d:4d:e2:ac:b9:76:a7:c4:9c:76:70:
5c:9b:62:f5:ef:16:e7:51:86:26:66:c7:77:50:3b:
af:fb:33:2c:7a:76:74:7e:29:69:5d:9e:1b:86:cc:
3f:82:f0:d3:b5:47:bc:9a:b6:16:05:21:98:44:1b:
4b:95:8f:a9:6f:27:7a:91:ad:79:48:27:33:38:f2:
9e:7f:5d:19:e3:3a:64:bf:81:3e:9c:d1:1e:b6:03:
bd:8f:78:7b:e0:11:3d:8d:9f:2e:d8:22:32:ab:da:
38:98:e8:e9:55:8e:a0:2a:2a:6d:e5:33:2f:ba:a0:
11:a2:14:1c:bd:4d:9d:ab:1e:c0:04:b0:54:12:31:
57:db:45:82:64:8d:88:33:b1:5b:cd:b1:8b:fc:3b:
70:0e:c7:b6:21:b1:56:89:a6:97:4a:cd:30:59:e5:
d2:10:fa:ca:54:db:ac:8b:07:06:72:9d:ac:ae:70:
1b:fa:88:e4:e0:b0:e6:22:a7:cb:8d:23:58:4d:f6:
3b:43:0f:d6:68:f3:21:54:0a:71:33:f6:b9:19:e7:
ac:fc:1e:64:55:bb:f4:3c:fa:e4:cd:66:50:28:ca:
92:e7:0f:6f:62:59:50:6d:d2:48:af:c4:06:d1:6d:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:38:90:8E:49:40:F9:8D:76:63:05:38:64:56:76:2C:DC:AF:27:FB
X509v3 Authority Key Identifier:
keyid:85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:35:2f:bf:22:5c:4b:7a:26:83:0a:2d:f8:72:f8:f3:15:c0:
d6:0f:da:d2:12:63:db:28:1a:58:fc:42:d3:e9:49:95:be:21:
eb:1d:a2:19:bd:65:86:16:64:6e:28:bd:52:92:3c:9c:6d:22:
8a:2d:48:40:53:40:88:95:eb:72:9d:ce:a0:ec:be:94:34:7d:
b3:cd:2c:18:20:f7:53:36:69:fb:7d:98:fa:6b:71:86:05:b0:
52:98:3a:fe:3f:e0:03:d5:60:9f:ee:83:8d:54:75:cf:25:38:
cf:0a:e4:4f:67:d6:de:40:83:14:71:00:fa:e4:c4:75:b3:a2:
17:ef:cd:ce:88:a5:33:ea:a6:66:d9:96:d8:82:94:10:06:ff:
eb:a6:60:b2:36:f8:7a:84:5b:db:bb:51:bb:62:57:e0:35:a4:
f2:95:00:97:9d:d1:74:cc:59:d8:90:9b:1b:8c:be:bb:33:79:
6b:cb:43:04:5f:65:61:c9:2f:ca:74:c2:bc:b6:d7:72:11:4c:
e4:d3:8c:6b:25:28:80:13:70:a9:30:c8:7f:79:4c:37:86:a4:
18:17:eb:16:75:11:dd:b1:e9:e5:ac:fd:1a:e5:05:33:f4:de:
cd:09:e1:fe:e9:6f:9f:3e:a6:a1:97:f3:d9:b2:21:be:21:d4:
bf:4f:37:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:03 2025 by rpki-client